7b1d54fc26
Land #12577 , redis_unauth_exec fixes
2019-12-09 19:37:53 -06:00
263c7bf235
Use CheckModule in pulse_secure_cmd_exec
2019-12-03 10:39:58 -06:00
22412d4570
Fix bind error bug, and enhance check method.
2019-11-15 09:52:58 +08:00
baf27f9654
Land #12542 , add Bludit File Upload Exploit
2019-11-12 15:44:34 -06:00
3c1fa90a75
Land #12515 , Pulse Secure VPN RCE
2019-11-12 02:55:01 -06:00
a267ad9d64
Reference env(1) as the reason we have useful RCE
2019-11-12 02:17:58 -06:00
8df559eceb
Update print to warning
2019-11-12 02:09:43 -06:00
0c4580f254
Calibrate timeout for hax
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-12 02:03:52 -06:00
de72ed8545
Print our glorious success
2019-11-12 02:02:53 -06:00
238c931fd3
Don't fail module if blocking through timeout
2019-11-12 01:55:56 -06:00
d8e612726c
Note that an admin SID is required at present
2019-11-12 01:46:23 -06:00
1573664c78
Reduce timeout for when the shell pops
2019-11-12 01:41:19 -06:00
bc5b0645dd
Fix typo
2019-11-12 01:25:36 -06:00
2c6c46701c
Update DefaultOptions
2019-11-12 01:23:53 -06:00
8664ac9dd8
Add target print
2019-11-12 01:17:28 -06:00
e9fb4a2528
Check for nil
...
Oops.
2019-11-12 01:10:26 -06:00
f4c7690247
Print cmd/unix/generic command output, minus HTML
2019-11-12 01:08:56 -06:00
09901fdf56
Clarify session cookie could be invalid
2019-11-12 01:08:25 -06:00
5b825e8245
Readd cmd/unix/generic target with manual badchars
2019-11-12 01:08:09 -06:00
717a31c7c3
Fix typos and format
2019-11-11 14:47:56 -06:00
2b3c2b6af5
Land #12535 , module traits for some local exploits
2019-11-07 10:00:39 -06:00
9cf62d02f9
land #12492 coldfusion rds updates
2019-11-07 05:16:29 -05:00
876a307816
Land #9396 , Linux net snmpd rw access
2019-11-07 02:52:47 +00:00
2ab1b9071f
remove unsupported check
2019-11-07 01:34:16 +00:00
61dc3ad487
Replace manual escaping with shellescape function
2019-11-07 01:33:42 +00:00
553601210a
Add CVE-2019-16113: Bludit Directory Traversal Image Upload Exploit
2019-11-05 08:57:15 -06:00
38498305d3
Add module notes for Reliability and Stability
2019-11-03 00:33:24 +00:00
c9948c037d
Apply suggestions from code review
...
- Change executable in shebang from python3 to python
- Revert changes to files that will only run as python2
Co-Authored-By: acammack-r7 <adam_cammack@rapid7.com >
2019-11-01 19:20:22 -07:00
294cbcffb6
Land #12382 , Add Linux Micro Focus (HPE) Data Protector omniresolve Privesc (CVE-2019-11660)
2019-11-01 08:06:01 +00:00
b08e031863
Update module description
2019-11-01 17:11:33 +11:00
c6e739c76d
Code cleanup
2019-11-01 16:30:37 +11:00
10b5df1c4f
Change all python2.7 shebangs to python3.
...
Remove utf-8 encoding declarations, as this is the default for python3.
2019-10-31 15:10:58 -07:00
8563a29003
Convert all python code to python3. Fixes #12506 .
2019-10-31 14:16:14 -07:00
81da0d18c6
Add blurb about pre-auth file read
2019-10-30 20:41:57 -05:00
f3a6aeea60
Add true post_auth? definition
2019-10-30 20:31:58 -05:00
77c26e9a70
Add Pulse Secure VPN arbitrary command execution
2019-10-30 20:08:02 -05:00
e010f48a3b
Move module to coldfusion_rds_auth_bypass
2019-10-27 11:25:56 -05:00
991ccdbda5
Land #12106 , Add Linux PTRACE_TRACEME local root exploit
2019-10-23 14:01:14 +00:00
8c93b219d1
fix compile.rb and rubocop
2019-10-23 20:54:42 +08:00
7ff71819e9
add architecture check to check method
2019-10-23 20:38:55 +08:00
3b5d0b98e7
add a basic check method using loginctl
2019-10-23 19:50:19 +08:00
4d4754a389
feedback from bcoles
2019-10-10 13:30:31 +08:00
af05a33957
Land #12408 , Fix spelling mistakes
2019-10-05 21:10:56 +00:00
9f29f5f419
fix spelling received
2019-10-05 14:40:27 -04:00
905eb17132
begining to fix spelling errors
2019-10-05 14:26:34 -04:00
dc64529f03
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
2019-10-03 09:08:12 +03:00
b8f19eb933
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
...
Co-Authored-By: Valeri Melnikov <MelnikoffVA@yandex.ru >
2019-10-03 09:03:24 +03:00
fd2008c182
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-10-02 20:21:35 +03:00
2f0e08b323
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-10-02 20:03:07 +03:00
06118ab8dc
Update modules/exploits/linux/local/omniresolve_suid_priv_esc.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-10-02 11:43:12 +03:00
William Vu